HEADSUP: pcre security announcement

Corinna Vinschen corinna-cygwin@cygwin.com
Wed Sep 7 13:04:00 GMT 2005


On Sep  7 08:47, Igor Pechtchanski wrote:
> On Wed, 7 Sep 2005, Corinna Vinschen wrote:
> 
> > First a question to the maintainers in general:
> >
> > There's a dependency in pcre's setup.hint which pulls in the old libpcre
> > which I created ages ago and which lacks versioning support.  I just
> > checked and we don't have any package left which requires the old
> > libpcre.
> >
> > Shouldn't we finally pull this crap from the distro?
> 
> I'd definitely remove it from pcre's setup.hint, but leave it in the
> obsolete category, as there may be self-compiled binaries depending on it.

Sounds like a plan.

> > On Sep  6 16:51, Yaakov S wrote:
> > > Corinna Vinschen wrote:
> > > > Two weeks and no response.  Unfortunately we have this security
> > > > issue and also a couple of packages relying on libpcre.  So we would
> > > > need either a quick response from Ronald or somebody willing to take
> > > > over the package fairly quickly.
> > > >
> > > > Anybody, please?
> > >
> > > Here you go.  Since a lot of key programs (i.e. grep) depend on this,
> > > please test and make sure that this doesn't break anything.
> >
> > First of all, many many thank for taking over.  This is definitely
> > worth a gold star.  IIIIGOOOOR!
> 
> Huh, did I miss something? ;-)
> BTW, should Alan Hourihane get a few as well?

Er... didn't he get them already?


Corinna

-- 
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Project Co-Leader          mailto:cygwin@cygwin.com
Red Hat, Inc.



More information about the Cygwin-apps mailing list